Privacy Policy

1. Who we are

This policy is published by Samadhaan Labs Pvt. Ltd. ("Samadhaan Labs", "we", "us"), a company incorporated under the Companies Act, 2013, with registered office at 4201, A Wing, Gauri Excellency, Kandivali West, Mumbai, Maharashtra 400067, India (CIN: U72900KA2024PTC012345). We operate the SucsessMaperrs mobile application and website.

This policy explains what personal data we collect, why, how we use and protect it, and your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian laws. If anything here is unclear, email Direction@SucsessMaperrs.com.

2. Data we collect

2.1 Information you give us

• Account: full name, email address, mobile number, age, stage (school / college / professional).
• Assessment responses: your answers to the six-assessment psychometric profile.
• Birth details (optional): date, time, and place of birth — used only if you opt into the Jyotish-based timing module.
• Parental consent records where required (see Section 6).
• Support correspondence you send to Direction@SucsessMaperrs.com or via the contact form.

2.2 Information collected automatically

• Device: type, OS version, app version, rough location (country / state).
• Usage: pages visited, features used, session duration.
• Log data: IP address (truncated after 30 days), timestamps, error traces.

3. How we use it

• To generate your personalized career intelligence report (the service you came here for).
• To communicate account updates and product notices.
• To improve the assessment and the role graph (using anonymized, aggregated data only).
• To comply with legal and regulatory obligations.
• To detect and prevent fraud or abuse.

We do not use your data for automated behavioural profiling to serve ads, and we do not share data with advertising networks.

4. Legal basis (DPDP Act)

We process personal data on one of the following DPDP bases:

• Consent — for account creation, optional birth-detail processing, and marketing emails. You can withdraw consent at any time from your account settings.
• Legitimate use as defined in Section 7 of the DPDP Act — for fraud prevention, legal compliance, and defending claims.

5. Sharing & transfers

We share data with a limited set of processors under data-processing agreements:

• Cloud hosting: Google Cloud (asia-south1 region, Mumbai) — primary data is stored in India.
• Email delivery: Postmark (USA) — only your email address and report PDF.
• Error tracking: Sentry (EU) — log data only, PII redacted.

Where processing involves cross-border transfer (Postmark, Sentry), we rely on the exception for legitimate uses under DPDP Section 16 and on contractual safeguards equivalent to Indian standards. We do not transfer data to jurisdictions restricted under notifications issued by the Central Government under DPDP.

We never sell personal data.

6. Users under 18 (Children's data)

Under the DPDP Act, any user below the age of 18 is a "child" and processing requires verifiable consent from a parent or lawful guardian. For users under 18:

• During sign-up we require the parent/guardian's name, relationship, and email; we send a verification link to that email before any processing begins.
• We do not track children's behaviour for targeted advertising.
• We do not show children advertisements of any kind.
• Parents can access, correct, or request deletion of the child's data at any time by writing to Direction@SucsessMaperrs.com.

7. Retention

• Assessment responses & reports: retained for 24 months after your last login, then deleted.
• Birth details: deleted immediately after report generation unless you opt into storing them for future reports.
• Account (email, name, mobile): retained until you delete your account; deletion completes within 30 days of request.
• Anonymized, aggregated data (no re-identification possible) may be retained indefinitely for research.
• IP logs: 30 days.

8. Your rights

Under the DPDP Act you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated data.
• Erase your data (subject to limited legal exceptions).
• Withdraw consent (without affecting past lawful processing).
• Port your data in a structured, machine-readable format.
• Nominate another person to exercise these rights if you are unable to.
• Grievance redressal (see Section 10).

To exercise any right, email Direction@SucsessMaperrs.com. We respond within 30 days.

9. Security

• Data at rest is encrypted with AES-256.
• Data in transit is encrypted with TLS 1.2+.
• Access is limited to a small number of authorized personnel and is audit-logged.
• We perform annual third-party security reviews.
• In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India in accordance with the DPDP Act.

10. Grievance Officer & Data Protection Officer

If you are not satisfied with our response, you can approach the Data Protection Board of India under Section 27 of the DPDP Act.

11. Changes

Material changes to this policy will be communicated via email and in-app notification at least 14 days before they take effect. The "Effective" date above reflects the current version.

12. Contact

For general privacy questions: Direction@SucsessMaperrs.com. For formal grievances: Direction@SucsessMaperrs.com.